General

  • Target

    Adobe.Photoshop.2024.v25.1.0.120-portable-by-XpucT.zip

  • Size

    87.7MB

  • MD5

    b558d4382b1c2889895e6e41d1de558c

  • SHA1

    c41f59377338798820445363757781c34917e2df

  • SHA256

    53df6ebc66ca58b839792f6e54a62bea35346970d0ea8b7c44c7065610428155

  • SHA512

    d9b5cc825816c5fdee434cd11b2ac6bca6969e0c68b2bb2c83210d28e3a457b1428ff1b455d9bfb2cb0266bec0c5d5ae19da8419d0c5e9cad1cc7e9044e86378

  • SSDEEP

    1572864:q/okQ0GbFwcmN5OX0UWFrHM2viszpNLfGJJfmuWeVPvje2gAQCryUv:+okQ0Ww/okB936cN14Xje2PQsyk

Score
5/10
upx

Malware Config

Signatures

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • Adobe.Photoshop.2024.v25.1.0.120-portable-by-XpucT.zip
    .zip
  • CEPHtmlEngine.exe
    .exe windows:6 windows x64 arch:x64

    7eca4eacde7bf01d8ca22d477b7c35fc


    Code Sign

    Headers

    Imports

    Sections

  • Droplet Template.exe
    .exe windows:6 windows x86 arch:x86

    6706409c1ce4925460948c083dd1d99d


    Code Sign

    Headers

    Imports

    Sections

  • Photoshop.exe
    .exe windows:6 windows x64 arch:x64

    0b6150c4503f63d0129b9bc5497d863f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PhotoshopApp.exe
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Headers

    Imports

    Sections

  • $PLUGINSDIR/MoreInfo.dll
    .dll windows:4 windows x86 arch:x86

    149adf074d317fbf0d2f17314bd18969


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    c4a726be6ec458c19b16bf3893cf4bc1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/execDos.dll
    .dll windows:5 windows x86 arch:x86

    a5d239ed12c9442d63c73cb9ff7cad0e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/newadvsplash.dll
    .dll windows:4 windows x86 arch:x86

    7efb019e000b6e0291c32d00fe622590


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/newtextreplace.dll
    .dll windows:4 windows x86 arch:x86

    42624ab02b71999959eb0f4168f609bb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:5 windows x86 arch:x86

    8700d0ebbb41c81ea52718af1ab70a93


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    f450890bf454de37198f435d5832e67d


    Headers

    Imports

    Exports

    Sections

  • PhotoshopPrefsManager.exe
    .exe windows:5 windows x86 arch:x86

    c4540f421523fe2dc591e50be5ad7d0b


    Code Sign

    Headers

    Imports

    Sections

  • convert.exe
    .exe windows:5 windows x86 arch:x86

    715de4a575c492057071b5d4ba88f2dc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • flitetranscoder.exe
    .exe windows:6 windows x64 arch:x64

    f37653588ef7b8f384a8c388328389a1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • node.exe
    .exe windows:6 windows x64 arch:x64

    592927f1c68c08ce26cdc03dcd72b3f7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • pngquant.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • sniffer.exe
    .exe windows:6 windows x64 arch:x64

    78f48150149aea5073173cf37401dc08


    Code Sign

    Headers

    Imports

    Sections